wss or ws? What is the difference? What do I connect best with?
wss: 443
ws: 80
These are ports on which a charging station connects to a CPMS such as wattify.
443 is our absolute preference. However, this depends entirely on the local software on the charging station whether it also has its root certificates up to date so that SSL works on port 443.
See below some more explanation on this
๐ Why are root certificates needed?
When the charging station connects to a server via WSS (WebSocket Secure), a TLS handshake (like HTTPS) happens underwater. In doing so, the charging station verifies that the server is really who it says it is.
๐ What does a root certificate do?
A root certificate is like a list of trusted "signers."
The charging station receives a certificate (e.g. cpo.wattify.be) from the server, and checks:
Is this certificate signed by a trusted party (e.g. Let's Encrypt, DigiCert, etc.)?
If that signer appears in the charging station' s root certificate list, then the charging station says: โ "I trust this server."
โ ๏ธ What if the root certificate is missing?
Then the charging station gets an error message when connecting to the server.
The connection is then not set up, or it has to explicitly set up to allow insecure certificates (which you never want in production).
โ Practical:
In many cases, charging stations run on embedded Linux or something similar, and there is a list of root certificates in there (such as /etc/ssl/certs/ca-certificates.crt).
That list needs to be up-to-date to trust modern certificate authorities.
๐ Summary in 1 sentence:
Yes, the charging station must have root certificates to trust a secure WebSocket connection, otherwise it cannot communicate securely with the server.